2026-08-26 归档

今日共收录 1656 条安全情报,包含 834 个 CVE,420 篇安全通告,以及 108 篇研究论文。

← 返回归档列表
威胁情报2026-08-25 发布INFO

The safety penalty: Reclaiming operational sovereignty in the age of AI

As frontier AI models become increasingly restrictive, security teams are facing a "safety penalty" that hampers real-ti

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-08-25 发布INFO

Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

Elastic's InfoSec team runs three agents that read the detection rule's investigation guide and the closure reasons on 3

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-08-25 发布INFO

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenti

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a sing

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attac

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-serv

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs)

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

Frontier AI: Vulnerability Management's Systemic Revolution

Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symb

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-25 发布INFO

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation. The post Linux Fo

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails

The company, previously known as ActiveFence, has raised a total of $280 million from investors. The post Alice Raises $

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

When Android users get a call from a non-contact, they will see more information about the caller, including their count

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference

Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashvi

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

First Malware Built Specifically for Car Head Units Fuels Botnet

Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices. The post Fir

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

Silent Patches Don’t Stop Attackers – They Blind Defenders

Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prior

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-25 发布INFO

Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff

AI infrastructure, including advanced semiconductors mostly made in Taiwan, has become a key point of competition betwee

历史摘要 · 未重新核验 · SecurityWeek